Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AB9UTGeXEDaRJELZBnpbSnpABjWivy6CKXwNWEyc7LkQ/0/3133312e3139362e3137312e302f32342d3234203d3e20323635393135.roa
File:                     3133312e3139362e3137312e302f32342d3234203d3e20323635393135.roa (raw, json)
Hash identifier:          0Z7R/U2cxsMurYs/gEvaynRJsqqBYz4jBFPXxFwjz0I=
Subject key identifier:   81:A4:79:A3:82:64:3F:E3:7D:3D:2A:2B:4E:40:A5:D6:78:F2:59:11
Certificate issuer:       /CN=3BDCBF73A9FD02DE55ADC9077B216E28EC64592A
Certificate serial:       01BCEEB8FC09F25526B1B5481E1398C7F8DCE190
Authority key identifier: 3B:DC:BF:73:A9:FD:02:DE:55:AD:C9:07:7B:21:6E:28:EC:64:59:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BDCBF73A9FD02DE55ADC9077B216E28EC64592A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AB9UTGeXEDaRJELZBnpbSnpABjWivy6CKXwNWEyc7LkQ/0/3133312e3139362e3137312e302f32342d3234203d3e20323635393135.roa
Signing time:             Thu 18 Jul 2024 21:22:38 +0000
ROA not before:           Thu 18 Jul 2024 21:17:38 +0000
ROA not after:            Thu 17 Jul 2025 21:22:38 +0000
asID:                     265915
IP address blocks:        131.196.171.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 04 Dec 2024 20:04:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:bc:ee:b8:fc:09:f2:55:26:b1:b5:48:1e:13:98:c7:f8:dc:e1:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BDCBF73A9FD02DE55ADC9077B216E28EC64592A
        Validity
            Not Before: Jul 18 21:17:38 2024 GMT
            Not After : Jul 17 21:22:38 2025 GMT
        Subject: CN=81A479A382643FE37D3D2A2B4E40A5D678F25911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e2:f3:a8:c3:2f:ee:30:65:49:d1:ea:a5:66:
                    21:c9:aa:00:6e:93:c7:93:e9:71:a4:61:05:81:83:
                    10:8f:86:fc:c1:50:ed:23:1e:53:0a:69:5e:02:88:
                    28:30:07:8e:6a:0b:a6:6f:79:14:15:46:f0:9f:f7:
                    39:02:8a:56:6e:30:9c:90:4a:5e:92:11:c5:49:c8:
                    ef:ca:e7:5e:53:e1:1e:09:73:e5:d6:45:24:74:19:
                    54:82:17:75:50:f8:f1:e9:c5:6c:9c:f6:f2:f1:cc:
                    12:cb:b0:45:06:aa:e0:bd:e5:fb:5d:c9:d2:4f:73:
                    f8:c2:fd:c3:33:c4:eb:29:06:0c:7a:9b:c2:5b:95:
                    ed:0e:c8:85:d9:e8:21:a7:74:4b:b4:1f:01:78:a7:
                    ed:ee:aa:b7:4b:0b:7d:34:70:3b:22:ec:ee:0b:be:
                    97:56:9a:74:38:e8:ad:c6:2c:f6:43:97:5c:0b:8f:
                    9b:1d:90:2c:1c:70:90:48:23:79:18:4e:79:c4:5d:
                    03:e7:cc:c4:3a:58:7a:67:e5:37:7f:05:f0:da:4e:
                    00:d3:e9:33:8a:91:1c:cd:61:0c:3a:a0:c2:e8:6e:
                    83:0c:39:e9:a3:a6:b2:0a:d4:77:19:02:85:6c:91:
                    a4:00:c8:3d:73:b1:ec:ae:84:10:f0:46:f8:a6:12:
                    0c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:A4:79:A3:82:64:3F:E3:7D:3D:2A:2B:4E:40:A5:D6:78:F2:59:11
            X509v3 Authority Key Identifier:
                keyid:3B:DC:BF:73:A9:FD:02:DE:55:AD:C9:07:7B:21:6E:28:EC:64:59:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AB9UTGeXEDaRJELZBnpbSnpABjWivy6CKXwNWEyc7LkQ/0/3BDCBF73A9FD02DE55ADC9077B216E28EC64592A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BDCBF73A9FD02DE55ADC9077B216E28EC64592A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AB9UTGeXEDaRJELZBnpbSnpABjWivy6CKXwNWEyc7LkQ/0/3133312e3139362e3137312e302f32342d3234203d3e20323635393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:7c:c7:97:7f:d7:c8:b0:aa:dc:55:e7:c3:7f:07:b6:e3:3e:
         28:de:51:28:45:4c:c1:d0:a8:aa:2f:a5:ae:df:64:1f:82:b8:
         bd:5f:6f:52:21:3a:24:b2:0e:a1:78:ef:87:e7:13:82:28:f4:
         71:63:74:20:cc:b9:2f:9b:11:49:2c:33:ea:85:62:ad:bb:ee:
         9b:e2:b6:4f:dd:fc:a5:17:f2:09:55:45:7d:01:ea:48:dd:61:
         17:94:a7:d6:b9:f6:9b:fa:0a:83:b5:45:23:5f:81:8d:42:ab:
         81:3a:cb:1e:5e:c8:cb:9a:26:36:fe:86:33:06:69:58:24:37:
         e4:85:8a:82:be:57:c7:a5:2b:cd:fd:82:09:e6:b7:fe:19:7f:
         fe:c9:ee:bd:8e:3a:19:e9:bd:57:0d:7e:96:98:c4:cd:62:e6:
         08:63:7a:da:59:65:a1:97:05:97:b2:b0:1e:53:90:48:f8:41:
         c6:57:09:d3:4b:60:f8:27:14:68:7f:f2:cc:5b:cc:5e:38:f3:
         db:6e:4d:7e:98:46:99:71:dd:9f:55:70:31:4a:70:ef:ad:53:
         fa:99:c8:e6:52:4b:84:4d:f7:cc:78:3d:af:a1:d4:44:89:66:
         a0:a3:6d:8d:da:d0:2a:0f:00:39:a8:af:78:0d:63:3d:06:9e:
         40:71:3b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:03:52 2025 by rpki-client